

IN THE CLAIMS 



Amend the claims as follows. 



1. 



(Currently amended) A secure wireless local area network (LAN), comprising: 



a firewall to control access to a wired computer LAN; 

a wireless device for us e by coupled to a wireless device operator; 

an access point conn e ct e d coupled to [a] the wired computer LAN in communication 
with the wireless device through an air channel for auth e nticating to authenticate the wireless 
device; and 

an authentication server conn e ct e d coupled to the wired computer LAN for providing 
to provide the operator with access to the wired LAN after authenticating the access point, the 
wireless device, and the operator without going through the firewall . 

2. (Currently amended) The secure wireless LAN of claim 1 wherein the access 
point includes a first authentication device for s e nding to send a first authentication message 
to the wireless device, the second authentication message including validating information 
about the access point. 

3. (Currently amended) The secure wireless LAN of claim 2 wherein the wireless 
device includes a second authentication device for s e nding to send a second authentication 
message to the access point, the first authentication message including validating information 
about the wireless device and the operator. 

4. (Currently amended) The secure wireless LAN of claim 3 wherein the access 
point sends the first and second authentication messages to the authentication server after 
authenticating the wireless device. 

5. (Currently amended) The secure wireless LAN of claim 3 wherein the first and 
second authentication devices are smart cards. 

6. (Currently amended) The secure wireless LAN of claim 1 including a control 
channel between the access point and the authentication server for sending to send an 
authentication message between the access point and the authentication server, the 
authentication message including validating information about the access point, wireless 
device, and operator. 
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7. (Original) The secure wireless LAN of claim 6 including a data channel on the 
wired LAN for sending data from the wireless device to any other device coupled to the 
wired LAN, the data channel being enabled after the authentication message is validated by 
the authentication server. 

8. (Currently amended) The secure wireless LAN of claim 6 wherein the 
communications between the wireless device and the access point and over the control 
channel is encrypted. 

9. (Currently amended) A secure wireless local area network (LAN), comprising: 
a firewall means to control access to a wired computer LAN: 

a wireless means for use by a wireless device operator; 

an access means conn e ct e d coupled to [a] the wired computer LAN for auth e nticating 
to authenticate the wireless means; 

an authentication server means conn e ct e d coupled to the wired computer LAN fef 
e nabling to enable the operator's access through the wireless access means acc e ss to the 
wired computer LAN after authenticating the access means, the wireless device, and the 
operator without going through the firewall means . 

10. (Currently amended) The secure wireless LAN of claim 9 wherein the access 
means includes a first authentication means for g e n e rating, e ncrypting, and transmitting to 
generate, encrypt and transmit a first authentication message to the wireless deviee means, 
the first authentication message including validating information about the access means. 

1 1 . (Currently amended) The secure wireless LAN of claim 1 0 wherein the 
wireless device includes a second authentication means for g e n e rating, e ncrypting, and 
transmitting to generate, encrypt and transmit a second authentication message to the access 
means, the second authentication message including validating information about the wireless 
device and the operator. 

12. (Currently amended) The secure wireless LAN of claim 1 1 wherein the first 
authentication means transmits the first and second authentication messages to the 
authentication means after authenticating the wireless device. 
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13. (Currently amended) The secure wireless LAN of claim 1 1 wherein the first 
and second authentication means are smart cards. 

14. (Currently amended) The secure wireless LAN of claim 9 including a control 
channel between the access means and the authentication means for sending to send an 
authentication message between the access means and the authentication means, the 
authentication message including validating information about the access means, the wireless 
device, and the operator. 

15. (Currently amended) The secure wireless LAN of claim 13 wherein 
communications between the wireless device and the access means and over the control 
channel are encrypted. 

16. (Currently amended) A method for operating a local area network (LAN), 
comprising: 

generating a first authentication message including validating information about an 
access point connected to a wired LAN; 

transmitting the first authentication message from the access point to a wireless device 
over a wireless channel; 

validating the access point by analyzing the first authentication message; 

generating a second authentication message including validating information about 
the wireless device and a wireless device operator; 

transmitting the second authentication message from the wireless device to the access 

point; 

validating the wireless device by analyzing the second authentication message; 
transmitting the first and second authentication messages to an authentication server 
after validating the access point and the wireless device; 
validating the operator; and 

enabling a data channel between the wireless device and other devices on the wired 
LAN after validating the access point and the operator; 

where validating the access point the wireless device, and the operator occurs at an 
authentication means without going through a firewall means . 
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17. (Currently amended) The method of claim 16 whereift transmitting the first 
authentication message includes transmitting information about the access point contained in 
a first authentication device. 

1 8. (Currently amended) The method of claim 1 7 whereift transmitting the second 
authentication message includes transmitting information about the wireless device and the 
operator contained in a second authentication device. 

19. (Currently amended) The method of claim 16 wherein transmitting the first 
and second authentication messages includes establishing a control channel between the 
access point and the authentication server. 

20. (Original) The method of claim 16 including encrypting information 
transferred over the wireless and control channel. 
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